CVE-2026-14165

Tuleap Enterprise Edition versions 17.0 to 17.5 are vulnerable to an authorization bypass due to a flaw that allows attackers to exploit user-controlled keys, potentially granting them unauthorized access to other users' data. Organizations using these versions should prioritize patching this vulnerability to mitigate the risk of data breaches and unauthorized information disclosure. Immediate action is essential for any entity relying on Tuleap for project management and collaboration.